Skip to content
OpenAdvisories

Archive

16 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /16 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-23812 Public exploit

    Malicious Package

    This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of h…

    node-ipc npm
  • Unscored —
    CVE-2022-0918 Public exploit

    A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access …

    389-ds-base 389-ds-base Debian Ubuntu
  • Unscored —
    CVE-2021-39706 Public exploit

    In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missi…

    Android
  • Unscored —
    CVE-2021-39704 Public exploit

    In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service…

    Android
  • Unscored —
    CVE-2021-39692 Public exploit

    In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to …

    Android
  • Unscored —
    CVE-2021-39685 Public exploit

    In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag …

    linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  • High 8.8
    CVE-2022-0811 Public exploit EPSS 19%

    Code Injection in CRI-O

    A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go